Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/r2_GXHe_RllkkD7YraTfNlhd_5E.roa
File: r2_GXHe_RllkkD7YraTfNlhd_5E.roa (raw, json)
Hash identifier: /l7ueA87wPcTCTOCUndBr+/Dx4Y/y89ek0fq3j9n68k=
Subject key identifier: AF:6F:C6:5C:77:BF:46:59:64:90:3E:D8:AD:A4:DF:36:58:5D:FF:91
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 01856F799257FC86940D833E3EF9772C67D1
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/r2_GXHe_RllkkD7YraTfNlhd_5E.roa
Signing time: Sun 01 Jan 2023 22:35:16 +0000
ROA not before: Sun 01 Jan 2023 22:35:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206238
IP address blocks: 45.142.144.0/22 maxlen: 24
45.137.88.0/22 maxlen: 24
45.138.52.0/22 maxlen: 24
45.137.100.0/22 maxlen: 24
45.142.16.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:79:92:57:fc:86:94:0d:83:3e:3e:f9:77:2c:67:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Jan 1 22:35:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=af6fc65c77bf465964903ed8ada4df36585dff91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b4:53:d1:4e:08:70:36:26:2e:0a:47:be:34:
de:1d:bd:03:ba:31:5c:b4:67:56:b0:a1:9e:58:ce:
c2:a4:42:68:d2:96:2a:e5:16:a2:3a:22:cb:d5:ae:
07:72:02:3f:4c:6f:52:2d:65:2f:76:2d:c3:5d:21:
24:c8:92:17:a7:7d:f7:20:c1:6b:6d:3a:cb:3d:45:
1a:32:44:6b:70:46:a9:44:44:f5:4a:27:15:22:1b:
9e:52:5b:1a:e5:08:77:63:65:68:af:d8:50:a5:6c:
ca:ae:eb:b0:34:f0:5e:dd:a0:99:09:3c:fb:04:3b:
22:d0:dc:77:96:73:ee:5e:f1:54:5a:fc:d8:03:b3:
3f:3e:5d:e0:97:13:d1:36:b5:24:bb:92:ee:69:4e:
1c:55:4d:13:d2:8c:29:ac:4d:a0:5a:35:62:f0:02:
fc:d9:b8:2e:a7:70:6d:d0:bc:61:f0:62:dd:bc:3d:
0c:4e:7a:c0:d3:97:c0:85:67:16:aa:ef:75:4e:6b:
bd:0d:78:c0:9d:eb:03:f4:3f:86:3e:c9:04:3a:fd:
6e:2e:f4:f6:8a:6b:b3:39:e0:7f:5a:5c:a8:bd:ee:
8b:43:0b:4c:4e:d3:ca:6d:fa:82:64:a9:94:1c:1e:
aa:b7:12:f6:0a:1f:96:76:4f:10:93:cd:5b:36:31:
20:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:6F:C6:5C:77:BF:46:59:64:90:3E:D8:AD:A4:DF:36:58:5D:FF:91
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/r2_GXHe_RllkkD7YraTfNlhd_5E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.88.0/22
45.137.100.0/22
45.138.52.0/22
45.142.16.0/22
45.142.144.0/22
Signature Algorithm: sha256WithRSAEncryption
3d:2a:e8:50:62:92:9a:cd:b0:a9:ba:08:29:2e:0e:37:3c:c8:
e3:af:74:9c:bf:f5:1a:38:94:9b:45:04:0e:ee:1c:c0:dc:79:
f6:9a:5c:c3:cf:cc:14:9c:7b:7d:20:f1:ba:d0:3b:56:c9:e4:
27:85:99:af:a4:85:19:76:32:e8:ea:43:b6:2f:c6:b5:b4:ee:
64:06:ca:ac:3c:35:db:d9:99:90:c8:4e:27:83:4b:9c:df:5d:
c5:aa:6e:e5:19:0a:c9:8e:5b:6f:36:f6:3f:46:14:bb:18:2f:
1f:45:ec:c3:58:53:96:6c:7b:25:7d:38:e1:82:6f:a1:2a:5a:
21:e2:46:7e:e8:1f:44:3e:20:49:f8:53:06:9b:48:bb:88:07:
4d:ea:b3:9e:4a:df:db:bb:27:b5:ad:44:b9:96:a6:da:c2:08:
e9:fb:ce:d0:69:83:45:9e:76:59:cc:e8:5c:d7:6b:31:e8:cb:
76:0e:da:04:6d:bc:ee:5e:f0:e6:a3:62:a5:97:b3:3b:a1:1a:
c7:55:99:f3:54:2f:55:ac:9e:6d:37:a3:b4:4e:9b:34:44:84:
49:a4:52:3d:af:c7:0e:e2:63:71:05:88:7e:8f:3a:c9:b3:57:
01:93:e3:39:04:bb:6c:f7:e2:38:07:e2:98:19:c5:fb:7f:df:
0f:f3:7e:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:01:43 2024 by rpki-client on console-ams.rpki-client.org